GENERIC HEAD from Jan 17 03:57 UTC, vmcore.145

GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #0: Mon Jan 17 09:08:27 CET 2005
    pho@current.osted.lan:/usr/src/sys/i386/compile/PHO
WARNING: WITNESS option enabled, expect reduced performance.
ACPI APIC Table: <A M I  OEMAPIC >
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Celeron(R) CPU 1.80GHz (1799.14-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0xf13  Stepping = 3
  Features=0x3febfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM>
real memory  = 267583488 (255 MB)
avail memory = 252448768 (240 MB)
:
mount root from ufs:/dev/ad0s1a
KDB: stack backtrace:
getdirtybuf(1,c65f4730,cf8cc560,1,cf8cc574) at getdirtybuf+0x129
flush_deplist(cf8cc560,c1789800,0,c2405700,1) at flush_deplist+0x39
flush_inodedep_deps(0,ee,cf8cc5a0,c0620c46,c0823dd7) at flush_inodedep_deps+0x63
softdep_sync_metadata(cf8cc700,1,0,0,4) at softdep_sync_metadata+0x4e
ffs_fsync(cf8cc700,cf8cc85c,c07393b6,cf8cc700,c06320fc) at ffs_fsync+0x111
VOP_FSYNC_AP(cf8cc700,c06320fc,c08f7840,c09192e0,0) at VOP_FSYNC_AP+0x4a
ffs_truncate(c1be79b4,2000,0,880,c1a8f580) at ffs_truncate+0x64a
ufs_direnter(c1be79b4,c299dac8,cf8cc918,cf8ccc0c,0,c266c834,cf8ccc0c,cf8cc918) at ufs_direnter+0x520
ufs_makeinode(cf8ccbf8,cf8ccc0c,cf8cca6c,cf8cca54,c07ca27a) at ufs_makeinode+0x25a
ufs_create(cf8cca70,cf8ccb2c,c066d460,cf8cca70,0) at ufs_create+0x25
VOP_CREATE_AP(cf8cca70) at VOP_CREATE_AP+0x4a
vn_open_cred(cf8ccbe4,cf8ccce4,1b0,c1a8f580,3) at vn_open_cred+0x470
vn_open(cf8ccbe4,cf8ccce4,1b0,3,c08e82e0,8,c082c50c,3bb) at vn_open+0x1e
kern_open(c2609b80,bfbfea24,0,602,1b0) at kern_open+0xd6
open(c2609b80,cf8ccd14,3,7f,216) at open+0x18
syscall(bfbf002f,bfbf002f,bfbf002f,bfbfea24,bfbfea24) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (5, FreeBSD ELF32, open), eip = 0x280bfc47, esp = 0xbfbfe9cc, ebp = 0xbfbfe9e8 ---
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
:
sigreturn: eflags = 0x0
sigreturn: eflags = 0x0
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
:
kern.ipc.maxpipekva exceeded; see tuning(7)
kern.ipc.maxpipekva exceeded; see tuning(7)
pKDB: enter: manual escape to debugger
[thread pid 12 tid 100005 ]
Stopped at      kdb_enter+0x2c: leave
db> x panic_td
panic_td:       c25235c0
db> where
Tracing pid 12 tid 100005 td 0xc151f730
kdb_enter(c084166c,cbc6dc8c,c0620f5e,c08ea500,80086) at kdb_enter+0x2c
scgetc(c08c2a00,c168c080,c094e8e0,c151f730,cbc6dce4) at scgetc+0x3ba
sckbdevent(c094e8e0,0,c0967ac0) at sckbdevent+0x80
atkbd_intr(c094e8e0,0,cbc6dd1c,c05fef32,c094e8e0) at atkbd_intr+0x8c
atkbd_isa_intr(c094e8e0,0,0,c151e9d8,0) at atkbd_isa_intr+0x16
ithread_loop(c151c680,cbc6dd48,c151c680,c05fed94,0) at ithread_loop+0x19e
fork_exit(c05fed94,c151c680,cbc6dd48) at fork_exit+0x7e
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xcbc6dd7c, ebp = 0 ---
db> show pcpu
cpuid        = 0
curthread    = 0xc151f730: pid 12 "irq1: atkbd0"
curpcb       = 0xcbc6dda0
fpcurthread  = none
idlethread   = 0xc151f5c0: pid 11 "idle: cpu0"
APIC ID      = 0
currentldt   = 0x28
spin locks held:
db> show alllocks
Process 69026 (cc1) thread 0xc2600730 (100640)
exclusive sx user map r = 0 (0xc2323170) locked @ vm/vm_map.c:2994
Process 68998 (cc) thread 0xc2301a10 (100256)
exclusive sx user map r = 0 (0xc1cf774c) locked @ vm/vm_map.c:2994
Process 68976 (make) thread 0xc25235c0 (100574)
exclusive sleep mutex so_rcv r = 0 (0xc1e28578) locked @ kern/uipc_socket.c:992
db> where 68976
Tracing pid 68976 tid 100574 td 0xc25235c0
sched_switch(c25235c0,0,0) at sched_switch+0xeb
mi_switch(2,0,c08e82a0,8,c0824b95) at mi_switch+0x1b1
critical_exit(c08c9240,c25235c0,0,c25235c0,3f8) at critical_exit+0xa2
intr_execute_handlers(c08c9240,cf6f0a08,c25235c0,3f8,2580) at intr_execute_handlers+0xd0
atpic_handle_intr(0) at atpic_handle_intr+0x39
Xatpic_intr0() at Xatpic_intr0+0x20
--- interrupt, eip = 0xc0620c61, esp = 0xcf6f0a4c, ebp = 0xcf6f0a50 ---
critical_exit(c0950400,0,c0841121,a23) at critical_exit+0x61
siocnputc(c08c4640,70,5,70,cf6f0b9c) at siocnputc+0x82
cnputc(70,c0629f9c,c082383e,c0829941,cf6f0b80) at cnputc+0x4c
putchar(70,cf6f0b9c,c062a346,0,2062a456) at putchar+0x96
kvprintf(c082383d,c0629f9c,cf6f0b9c,a,cf6f0bbc) at kvprintf+0x5f
printf(c082383d,c08e8520,c08e8520,100,c0829941,cf6f0bf0) at printf+0x43
panic(c0829941,0,ffffffff,c1e28578,c0826e09) at panic+0xd8
soreceive(c1e28510,0,cf6f0c90,0,0) at soreceive+0x54c
fifo_read_f(c2182044,cf6f0c90,c203f800,0,c25235c0) at fifo_read_f+0x47
dofileread(3,bfbfdaf7,1,ffffffff,ffffffff) at dofileread+0x82
read(c25235c0,cf6f0d14,3,10,202) at read+0x44
syscall(2f,2f,2f,bfbfdb30,80a1c00) at syscall+0x128
Xint0x80_syscall() at Xint0x80_syscall+0x1f
--- syscall (3, FreeBSD ELF32, read), eip = 0x8064c77, esp = 0xbfbfdadc, ebp = 0xbfbfdaf8 ---
db> call doadump
Dumping 255 MB
 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240
Dump complete
0x29
db> reset

panic: receive: m == 0 so->so_rcv.sb_cc == 4294967295

(kgdb) l *soreceive+1356
0xc0648ab8 is in soreceive (../../../kern/uipc_socket.c:1347).
1342                            error = sbwait(&so->so_rcv);
1343                            if (error)
1344                                    goto release;
1345                            m = so->so_rcv.sb_mb;
1346                            if (m != NULL)
1347                                    nextrecord = m->m_nextpkt;
1348                    }
1349            }
1350
1351            SOCKBUF_LOCK_ASSERT(&so->so_rcv);
(kgdb) l 1017
1012                so->so_rcv.sb_cc < uio->uio_resid) &&
1013                (so->so_rcv.sb_cc < so->so_rcv.sb_lowat ||
1014                ((flags & MSG_WAITALL) && uio->uio_resid <= so->so_rcv.sb_hiwat)) &&
1015                m->m_nextpkt == NULL && (pr->pr_flags & PR_ATOMIC) == 0)) {
1016                    KASSERT(m != NULL || !so->so_rcv.sb_cc,
1017                        ("receive: m == %p so->so_rcv.sb_cc == %u",
1018                        m, so->so_rcv.sb_cc));
1019                    if (so->so_error) {
1020                            if (m != NULL)
1021                                    goto dontblock;
(kgdb) p *(struct socket *)0xc1e28510
$1 = {so_count = 0x1, so_type = 0x1, so_options = 0x0, so_linger = 0x0, so_state = 0x2, so_qstate = 0x0, so_pcb = 0xc18143d4,
  so_proto = 0xc088a860, so_head = 0x0, so_incomp = {tqh_first = 0x0, tqh_last = 0xc1e2852c}, so_comp = {tqh_first = 0x0,
    tqh_last = 0xc1e28534}, so_list = {tqe_next = 0x0, tqe_prev = 0x0}, so_qlen = 0x0, so_incqlen = 0x0, so_qlimit = 0x0, so_timeo = 0x0,
  so_error = 0x0, so_sigio = 0x0, so_oobmark = 0x0, so_aiojobq = {tqh_first = 0x0, tqh_last = 0xc1e28558}, so_rcv = {sb_sel = {
      si_thrlist = {tqe_next = 0xc2d6c2d8, tqe_prev = 0xc26c61a0}, si_thread = 0xc26c6170, si_note = {kl_lock = 0xc1e28578, kl_list = {
          slh_first = 0x0}}, si_flags = 0x1}, sb_mtx = {mtx_object = {lo_class = 0xc0884570, lo_name = 0xc0826cb6 "so_rcv",
        lo_type = 0xc0826cb6 "so_rcv", lo_flags = 0x30000, lo_list = {tqe_next = 0xc2d6c358, tqe_prev = 0xc1e285f0},
        lo_witness = 0xc08f93e8}, mtx_lock = 0xc25235c0, mtx_recurse = 0x0}, sb_mb = 0x0, sb_mbtail = 0x0, sb_lastrecord = 0x0,
    sb_cc = 0xffffffff, sb_hiwat = 0x2000, sb_mbcnt = 0x0, sb_mbmax = 0x10000, sb_ctl = 0x0, sb_lowat = 0x1, sb_timeo = 0x0,
    sb_flags = 0x9, sb_state = 0x0}, so_snd = {sb_sel = {si_thrlist = {tqe_next = 0x0, tqe_prev = 0x0}, si_thread = 0x0, si_note = {
        kl_lock = 0xc1e285e0, kl_list = {slh_first = 0x0}}, si_flags = 0x0}, sb_mtx = {mtx_object = {lo_class = 0xc0884570,
        lo_name = 0xc0826caf "so_snd", lo_type = 0xc0826caf "so_snd", lo_flags = 0x30000, lo_list = {tqe_next = 0xc1e28578,
          tqe_prev = 0xc1de966c}, lo_witness = 0xc08f9410}, mtx_lock = 0x4, mtx_recurse = 0x0}, sb_mb = 0x0, sb_mbtail = 0x0,
    sb_lastrecord = 0x0, sb_cc = 0x0, sb_hiwat = 0x2000, sb_mbcnt = 0x0, sb_mbmax = 0x10000, sb_ctl = 0x0, sb_lowat = 0x800,
    sb_timeo = 0x0, sb_flags = 0x0, sb_state = 0x0}, so_upcall = 0, so_upcallarg = 0x0, so_cred = 0xc203f800, so_label = 0x0,
  so_peerlabel = 0x0, so_gencnt = 0x130ba, so_emuldata = 0x0, so_accf = 0x0}
(kgdb) p *(struct uio*)0xcf6f0c90
$2 = {uio_iov = 0xcf6f0c88, uio_iovcnt = 0x1, uio_offset = 0xffffffffffffffff, uio_resid = 0x1, uio_segflg = UIO_USERSPACE,
  uio_rw = UIO_READ, uio_td = 0xc25235c0}